This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          3HWbRct2ZzR0qYpwNn6zmbqoDhg/IFg4jhLzwdBmPjY=
Subject key identifier:   79:2E:34:FB:A9:3C:98:E7:4B:96:4D:CF:35:78:AA:04:27:FC:B7:69
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019BF46358ADAB608541DE6F5962437DA815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          1146
Signing time:             Sun 25 Jan 2026 09:01:49 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:49 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:49 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: OA3bW5CvNzTpubSdWyN31yuGW1k.roa (hash: zRYN4Ihj8wmj8NicQeQLPMWF2X2WuUECXxrwsyWIt2I=)
                          3: OmDDKkcEib7k4pFWxXZ1HwkH5Zc.roa (hash: G2swW7hwtghzv2YhUx98Mnp+pnrjMhtKz6RSjWiReCk=)
                          4: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          5: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: Dy/slaEWWoXukFyPGtzVuOvXS8bRpqm5Nz+1PVR4Ftc=)
                          6: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:58:ad:ab:60:85:41:de:6f:59:62:43:7d:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Jan 25 09:01:49 2026 GMT
            Not After : Jan 26 09:01:49 2026 GMT
        Subject: CN=792e34fba93c98e74b964dcf3578aa0427fcb769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:ff:7d:10:9a:80:fc:1a:16:2a:1b:5b:b0:
                    cd:56:46:c9:a6:7c:1b:fa:7e:a9:17:0e:be:02:46:
                    6c:e0:a3:65:48:fc:e7:c5:aa:a0:e8:dd:dd:cf:c3:
                    08:61:c6:c7:09:c8:78:09:47:dd:c4:42:1c:21:91:
                    61:d3:80:76:00:d3:8a:e6:bf:dd:45:fb:bb:12:08:
                    f2:04:81:ff:a0:64:6b:83:13:91:b7:b2:46:c3:66:
                    e2:5d:c0:e7:88:3e:40:34:14:70:36:b5:75:7d:b3:
                    d9:91:38:4e:1e:67:fb:a1:b0:1a:4a:fc:77:fa:33:
                    73:ac:7e:c9:6e:6d:4a:44:ab:16:1c:b7:f2:f6:f5:
                    c7:e0:57:16:08:6b:32:e3:19:a8:6c:36:9a:f2:d8:
                    25:7c:25:8d:9d:2c:c0:5f:3e:5e:dc:72:98:b1:61:
                    4f:89:41:7c:1c:91:cd:0f:27:67:1e:cb:ad:00:55:
                    b7:7c:96:6f:99:ab:18:b8:fd:d9:02:c9:8c:27:82:
                    87:6d:36:e5:c4:4b:23:e3:7c:e1:13:ac:e7:66:f1:
                    7d:5c:74:c3:3b:2c:16:9f:65:e6:58:e8:95:79:2d:
                    27:1a:61:a7:dd:9d:cc:66:10:24:be:39:6c:a0:97:
                    6f:c3:38:72:15:86:e0:34:c6:47:3e:9f:c5:8e:69:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:34:FB:A9:3C:98:E7:4B:96:4D:CF:35:78:AA:04:27:FC:B7:69
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:d6:32:99:62:db:ee:3a:aa:84:2d:ba:2d:1f:1d:c5:6e:
         b0:35:37:ff:ee:b8:c0:9a:93:8c:74:1e:2b:e0:52:19:5d:12:
         11:a1:5b:cc:df:46:ab:e1:56:40:79:f8:a4:95:03:d2:e2:09:
         e3:69:0b:97:dd:cf:95:a7:7b:bb:a3:91:6d:71:a6:01:63:f3:
         c7:b9:8c:c3:c3:08:88:da:60:7b:d6:ed:92:1f:59:58:a0:d1:
         26:52:0d:ba:d2:6a:bb:db:40:ac:38:c3:ee:69:3b:25:48:d8:
         40:ba:5d:56:bc:f7:f1:28:8b:50:01:59:9a:4e:f2:f5:9b:a0:
         15:c8:64:be:1c:cb:68:ef:e4:ec:59:24:86:c7:7d:4e:cc:26:
         ca:ea:9a:42:db:3b:3b:47:e4:f1:b3:40:2a:b0:aa:41:95:43:
         6a:36:72:b1:46:26:a9:14:ba:7c:15:e0:12:b3:8b:22:b3:a2:
         8a:b3:a5:96:04:ec:ff:ca:53:50:a9:41:5f:46:aa:83:59:0e:
         49:8d:c7:f2:d0:21:b9:9b:98:11:8a:47:59:4c:a6:99:37:01:
         69:bb:cd:a4:4f:b1:fb:91:71:29:be:df:d8:62:7b:78:42:e3:
         78:41:85:06:e2:a7:4a:d0:e4:06:31:a9:e4:27:e5:57:5b:16:
         0b:ac:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:07 2026 by rpki-client